IT Senior Auditor

First Bank•Raleigh, NC

About The Position

The position of Information Technology (IT) Senior Auditor is responsible for performing and coordinating the planning, fieldwork, and reporting of IT-related audits and IT SOX testing, ensuring compliance with regulations and bank policy and procedures.

Requirements

Bachelor’s degree from a four-year college or university.
Minimum three years of experience in audit, risk, or equivalent, preferably in the financial institution industry, including experience working in Information Technology, Information Security, Cybersecurity, Business Continuity / Disaster Recovery.
Experience auditing Information Technology risks and SOX controls.
Strong analytical skills in identifying Information Technology controls and assessing functionality.
Detail oriented in documenting work performed in the preparation of work papers, spreadsheets and word documents, and audit reports.
Self-starter capable of planning and executing audit test plans within a risk-based audit framework.
Strong interpersonal, written and oral communication skills, including the ability to work with all levels of staff, management, and bank regulators.
Proficient in MS Office tools including Microsoft Excel, Word and PowerPoint.
Must be able to establish relationships and effectively communicate with all levels of bank personnel.
Must maintain knowledge of many areas of the financial institution.
Working knowledge of laws and regulations pertaining to financial institutions, and the ability to interpret and understand laws and regulations.
Adhere to bank policies and procedures.

Nice To Haves

CISA certification preferred.

Responsibilities

Develops and executes Information Technology-related audits in areas such as, but not limited to, cybersecurity, IT operations, business continuity / disaster recovery, and information security. Incumbent will perform both substantive testing procedures as well as tests of controls.
Conducts walkthroughs and prepares documentation supporting the understanding of Information Technology-related processes.
Performs testing of Information Technology SOX controls in areas such as, but not limited to, authentication, user access provisioning/de-provisioning, change management.
Prepares and updates risk assessments for assigned areas.
Reviews and / or assists in the preparation of reports of audit findings, presenting any irregularities or exceptions to appropriate audit personnel.
Utilizes sound analytical and technical skills to communicate audit issues and findings with process owners and management.
Follows up on high risk Information Technology issues for impact and tests the design and sustainability of remediation activities.
Assists with execution of continuous monitoring activities to keep current on risks, initiatives, etc. in the business.
Identifies opportunities to automate audit testing and processes through use of technology and data to create efficiencies.
Assists in coordination and delivery of audit requests for regulatory examiners and/or external auditors as needed.
Completes annual compliance courses and required CPE.
Adheres specifically to all corporate policies and procedures. Also adheres to Federal and State regulations and laws; including, the Bank Secrecy Act and the Anti-Money Laundering Act.
Adheres to all levels of our Service Excellence standards.